Fix: explicit banlist injection